JiriUhlir
149 lines
4.4 KiB
Python
149 lines
4.4 KiB
Python
DEPLOY_SCRIPT = "/tools/deploy-app.sh"
|
|
DELETE_APP_SCRIPT = "/tools/delete-app.sh"
|
|
BACKUP_SCRIPT = "/tools/backup-appfactory.sh"
|
|
RESTORE_SCRIPT = "/tools/restore-appfactory.sh"
|
|
GENERATE_COMPOSE_SCRIPT = "/tools/generate-apps-compose.sh"
|
|
|
|
CATALOG_FILE = "/opt/appfactory/apps/catalog.yml"
|
|
APPFACTORY_ENV = "/opt/appfactory/config/appfactory.env"
|
|
|
|
DEFAULT_BACKUP_DIR = "/opt/appfactory/backups"
|
|
DEFAULT_GITEA_ORG = "appfactory"
|
|
INTERNAL_GITEA_URL = "http://appfactory-gitea:3000"
|
|
|
|
PORTAL_PREFIX = "/portal"
|
|
AUTH_MODES = {"google", "mixed", "local"}
|
|
|
|
|
|
def read_env_value(key: str, default: str = "") -> str:
|
|
try:
|
|
with open(APPFACTORY_ENV, "r", encoding="utf-8") as f:
|
|
for line in f:
|
|
line = line.strip()
|
|
if line.startswith(f"{key}="):
|
|
return line.split("=", 1)[1].strip().strip('"')
|
|
except Exception:
|
|
pass
|
|
|
|
return default
|
|
|
|
|
|
def read_env_bool(key: str, default: bool = False) -> bool:
|
|
value = read_env_value(key, "")
|
|
if value == "":
|
|
return default
|
|
|
|
return value.strip().lower() in {"1", "true", "yes", "on"}
|
|
|
|
|
|
def get_portal_public_url() -> str:
|
|
public_url = read_env_value("APPFACTORY_PORTAL_PUBLIC_URL", "").rstrip("/")
|
|
if public_url:
|
|
return public_url
|
|
|
|
domain = read_env_value("APPFACTORY_PORTAL_DOMAIN", "").strip()
|
|
if read_env_bool("APPFACTORY_ENABLE_HTTPS") and domain:
|
|
return f"https://{domain}"
|
|
|
|
return ""
|
|
|
|
|
|
def get_google_redirect_uri() -> str:
|
|
redirect_uri = read_env_value("GOOGLE_REDIRECT_URI", "").strip()
|
|
if redirect_uri:
|
|
return redirect_uri
|
|
|
|
public_url = get_portal_public_url()
|
|
if public_url:
|
|
return f"{public_url}{PORTAL_PREFIX}/auth/google/callback"
|
|
|
|
return ""
|
|
|
|
|
|
def get_gitea_public_url() -> str:
|
|
return (read_env_value("GITEA_URL", "") or read_env_value("GITEA_ROOT_URL", "")).rstrip("/")
|
|
|
|
|
|
def get_gitea_server_url() -> str:
|
|
return (
|
|
read_env_value("GITEA_SERVER_URL", "")
|
|
or read_env_value("GITEA_INTERNAL_URL", "")
|
|
or get_gitea_public_url()
|
|
or INTERNAL_GITEA_URL
|
|
).rstrip("/")
|
|
|
|
|
|
def get_gitea_admin_token() -> str:
|
|
return (
|
|
read_env_value("GITEA_ADMIN_TOKEN", "")
|
|
or read_env_value("GITEA_API_TOKEN", "")
|
|
or read_env_value("GITEA_TOKEN", "")
|
|
).strip()
|
|
|
|
|
|
def get_gitea_redirect_uri() -> str:
|
|
redirect_uri = read_env_value("GITEA_OAUTH_REDIRECT_URI", "").strip()
|
|
if redirect_uri:
|
|
return redirect_uri
|
|
|
|
public_url = get_portal_public_url()
|
|
if public_url:
|
|
return f"{public_url}{PORTAL_PREFIX}/auth/gitea/callback"
|
|
|
|
return ""
|
|
|
|
|
|
def is_gitea_oauth_button_enabled() -> bool:
|
|
return bool(
|
|
get_gitea_public_url()
|
|
and read_env_value("GITEA_OAUTH_CLIENT_ID", "")
|
|
and read_env_value("GITEA_OAUTH_CLIENT_SECRET", "")
|
|
and get_gitea_redirect_uri()
|
|
)
|
|
|
|
|
|
def get_appfactory_host(request_host: str = "") -> str:
|
|
configured_host = read_env_value("APPFACTORY_HOST", "").strip()
|
|
if configured_host:
|
|
return configured_host
|
|
|
|
public_url = get_portal_public_url()
|
|
if public_url:
|
|
return public_url.split("://", 1)[-1].split("/", 1)[0].split(":", 1)[0]
|
|
|
|
return (request_host or "").split(":", 1)[0]
|
|
|
|
|
|
def get_auth_domain_readiness() -> dict[str, bool]:
|
|
google_enabled = read_env_bool("GOOGLE_OAUTH_ENABLED")
|
|
google_client_id = read_env_value("GOOGLE_CLIENT_ID", "")
|
|
google_client_secret = read_env_value("GOOGLE_CLIENT_SECRET", "")
|
|
google_redirect_uri = get_google_redirect_uri()
|
|
|
|
return {
|
|
"portal_public_url_configured": bool(get_portal_public_url()),
|
|
"auth_mode_google": get_auth_mode() == "google",
|
|
"auth_mode_mixed": get_auth_mode() == "mixed",
|
|
"auth_mode_local": get_auth_mode() == "local",
|
|
"google_oauth_enabled": google_enabled,
|
|
"google_oauth_configured": bool(google_client_id and google_client_secret and google_redirect_uri),
|
|
"google_redirect_uri_configured": bool(google_redirect_uri),
|
|
"https_enabled": read_env_bool("APPFACTORY_ENABLE_HTTPS"),
|
|
}
|
|
|
|
|
|
def get_auth_mode() -> str:
|
|
mode = read_env_value("AUTH_MODE", "mixed").strip().lower()
|
|
if mode in AUTH_MODES:
|
|
return mode
|
|
return "mixed"
|
|
|
|
|
|
def is_google_oauth_button_enabled() -> bool:
|
|
return bool(
|
|
read_env_bool("GOOGLE_OAUTH_ENABLED")
|
|
and read_env_value("GOOGLE_CLIENT_ID", "")
|
|
and read_env_value("GOOGLE_CLIENT_SECRET", "")
|
|
and get_google_redirect_uri()
|
|
)
|